You have to have somewhere in the filter:
failregex = NOQUEUE: reject: RCPT from \S+\[\]: .*$
lost connection after \S+ from (.*)\[\]
reject: (header|body) .* from (.*)\[\]
timeout after \S+ from \S+\[\].*$
warning: Connection rate limit exceeded:
See in-line, but I'd need to check how to get awk to output to a
file. I think you need to define an out_file in the awk script or
redirect the output with a "> some.file" which f2b can then
parse.
On 17/10/2015 20:42, Nicolas Repentin
wrote:
Hi Nicolas,
I've got a question about a possible regex, maybe someone can help to tell me
if it is possible.
On a postfix server, fail2ban can block reject connection, or multiples tries.
But, is it possible to make him block the servers which made a junk mail?
For example, on
fail2ban-users@lists.sourceforge.net
Subject: Re: [Fail2ban-users] Fail2ban / postfix
Hi
This is a good idea :-)
Nicolas Repentin
<nico...@shivaserv.fr<mailto:nico...@shivaserv.fr>>
Le 15 octobre 2015 09:15, Iosif Fettich a écrit:
Hi Nicolas,
I've got a question about a possibl
